Sr. Manager- II - IT SC

ICICI Prudential Life Insurance; Hinoba-an; On-site; PHP 900,000 - 1,200,000; Full time

Job summary

ICICI Prudential Life Insurance is seeking an IT Audit professional to lead control evaluations across applications, OS, databases and network security. You will plan, test, document and report ITGC controls and coordinate with process owners and external auditors.

You will drive ISO, SOX and ICoFR audit activities, translate findings into remediation steps, and collaborate with stakeholders to strengthen our information security posture and regulatory compliance.

Qualifications

• Experience in IT controls and ITGC across applications, OS, databases.
• Knowledge of IT governance frameworks (COSO, COBIT) and compliance.
• Understanding of SOX, ISO, ICoFR and cybersecurity controls.

Responsibilities

• Coordinate ITGC control assessments with business and IT process owners.
• Plan, test, document, and report IT controls effectiveness.
• Communicate issues and remediation actions to process owners.
• Prepare reports on control adequacy and effectiveness.
• Track open issues and follow up on remediation.
• Interact with external auditors and support IT audit.
• Lead ISO, SOX and ICoFR audit planning, fieldwork, and reporting.
• Assist IT application owners during SOX testing.

Skills

SDLC knowledge

CA CPA CIA certs

IT risk & security

COSO & COBIT

ISO & SOX compliance

Education

BE / B.Tech CS / MBA – Systems

Job description

• Coordinate withbusiness and IT process owners to initiate, scope, plan, and conduct periodiccontrols assessments to identify areas of risk by evaluating the design andoperating effectiveness of Information Technology General Controls (ITGC) overapplications, operating systems, and databases as well as the networkinfrastructure including cybersecurity controls
• Planning,testing, documentation and reporting
• Communicateissues to process owners, ensuring their understanding of associated risks andthe actions needed to remediate those risks
• Prepare reportsbased on the adequacy and effectiveness of controls evaluated/tested
• Track andMonitors open issues and conductsfollow-up to evaluate the adequacy of remediation efforts
• Communicate withexternal auditors and support their initiatives effectively from an IT auditstandpoint.
• Lead ISO, SOX and ICoFR audit planning, fieldwork(testing and documentation), and reporting
• Interact withthe IT application owner and provide assistance as needed during the SOXcontrol testing processes, including attending walkthrough meetings andperforming testing on their behalf
• Aware about ITControls and related compliances
• Evaluatecompliance with Company policies and procedures and regulatory standards
• Buildcollaborative working relationships with internal stakeholders (appropriatelevels of management

Education

BE / B.Tech Computer Science / MBA – Systems

Competencies (Knowledge & Skills)

• Knowledge ofSDLC (Software Development Life Cycle)
• Certification ofCA, CPA or CIA (or actively working towards) or other similar certificationswould be an added advantage.
• Demonstratedin-depth knowledge of concepts, best practices and controls in a breadth ofInformation Security areas/domains. These include governance & riskmanagement, access control, cybersecurity, physical security, securityarchitecture and design, business continuity/disaster recovery, networksecurity, application & operations security and compliance/incidentmanagement.
• Demonstratedability to understand complex technologies, business processes, regulations andemerging risks.
• Strongunderstanding of ISO, SOX and IT frameworks including COSO and COBIT.